Tech stack
Dependency-free C++17 core (BCrypt CNG crypto, AES-256-GCM vault, multithreaded scanner, YARA-ready) wrapped in a Python/PySide6 desktop app with a Flutter companion.
Open-Source Security Engineering Project
A from-scratch
endpoint security engine.
An open-source software project: a dependency-free C++17 engine (BCrypt CNG crypto, AES-256-GCM quarantine vault, multithreaded scanner, YARA-ready) wrapped in a Python/PySide6 desktop app with a Flutter mobile companion. Built for auditability — inspect it, build it, fork it, or contribute.
C++17·Python / PySide6·Flutter·Open Source
ENGINE · DESKTOP · MOBILE
0
Platforms
0
Unit tests
0
C++ engine
0
Scan approaches
Software Development
An open-source engineering project.
A project you can build and audit.
Nyxwarden is a from-scratch security research project. The full source is on GitHub — inspect it, build it, fork it, or contribute.
Architecture
Modular layout: Nyxwarden-Engine (C++), Nyxwarden-Desktop (Python), Nyxwarden-Mobile (Flutter) and a planned WDK minifilter driver. Full build + dev guides live in the README.
Build from source
MinGW or MSVC + CMake for the C++ engine (build.bat), pip install for the desktop app, flutter build for Android/iOS. 55+ unit tests included.
Security engineering
HMAC-authenticated remote channel, DPAPI-wrapped vault key, SLSA provenance on every build, reversible hosts-file web shield, and an honest security scope documented in SECURITY.md.
Architecture
Engine, desktop app,
and mobile companion.
Three codebases, one coherent project. A real C++17 security core, a Python/PySide6 desktop shell, and a Flutter app — designed for auditability and integration.
Real-Time Protection
Watches Downloads, Desktop, Documents and autostart keys, scanning every new or mutated file the moment it appears.
Web Shield
Blocks known-bad domains at the system level via the hosts file, stopping threats and phishing before they load.
Encrypted Quarantine
A C++ AES-256-GCM vault with a DPAPI-wrapped key. Nothing is ever deleted without your consent — restore it anytime.
C++ Scan Engine
Multithreaded, one thread per core. Combines signature matching, heuristics and optional ClamAV / VirusTotal / YARA second opinions.
Phone Companion App
A full-screen pulsing alarm rings the moment a threat is found — with remote Quarantine & Fix or Ignore, right from your phone.
Auto-Updating Defenses
Virus definitions update automatically and checksum-verified — a tampered or unsigned feed is always rejected.
Development workflow
Simple to build.
Invisible complexity.
01
Clone & build the engine
MinGW or MSVC + CMake builds nyxctl.exe and the unit-test binary. Dependency-free C++17 — no third-party runtime needed.
02
Run the desktop app
pip install -r requirements.txt, then python main.py. The C++ engine powers scanning and the encrypted quarantine vault.
03
Build the companion app
flutter build for Android/iOS. A secure, HMAC-authenticated remote channel links the phone to the PC for alerts and control.
Security you can verify
Honest by design.
Nyxwarden never silently deletes your files, and every release is signed with supply-chain provenance.
Nothing deleted without consent
Threats are reported and quarantined only with your approval — you always control the outcome.
SLSA provenance on every build
Installers ship with SHA-256 checksums and SLSA provenance you can verify against Sigstore.
Path-free push alerts
Phone notifications never expose your file paths or Windows username.
Releases
Pre-built releases.
Build from source, or grab the latest release binaries below.
Windows
Nyxwarden Setup
Installer for Windows 10 / 11 — antivirus + C++ engine + full setup.
Download for Windows
Android
Nyxwarden App
Companion app — instant phone alarms, remote quarantine and scans.
Download APKPrefer the source? Nyxwarden is open on GitHub — build it yourself anytime.